Re: [FW-1] FW rejects FTP connection

[James Schnack <acrux14@FW1-NOSPAMHOTMAIL.COM>]

Alfred,

It seems to me from the tcpdump output that the RST is being issued by the
FTP *client* (timestamps would have been helpful!). Probably there's nothing
wrong with the FW, considering that you see an accept log entry...

Any chance that you run some kind of detail logging on the client ?

J.


> From: Alfred Asars <aasars@YAHOO.COM>
> Reply-To: Mailing list for discussion of Firewall-1
> <FW-1-MAILINGLIST@beethoven.us.checkpoint.com>
> To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
> Subject: [FW-1] FW rejects FTP connection
> Date: Thu, 21 Mar 2002 23:58:20 -0800
>
> Hi!
>
> I have a problem with connection to one external FTP
> server. FW-1 rejects connection
> to only this server, while connections to others
> servers is OK.
>
> Log Viewer shows, that connection is accepted, but
> tcpdump on external interface show that
> FW sends RST to server after TCP connection is
> established.
>
> My working environment
> FW-1 NG FP1 on Noika 740 cluster. IPSO 3.4.2
> FW performs NAT
>
> *********TRACE***********
>
> FW Internal interface
>
> tcpdump: listening on eth-s3p1c0
> I A.B.C.D.2536 > E.F.G.H.21: S:(0) win 16384 <mss
> 1460,nop,nop,sackOK> (DF)
> O E.F.G.H.21 > A.B.C.D.2536: S:(0) ackwin 6144 <mss
> 1460> (DF)
> I A.B.C.D.2536 > E.F.G.H.21: . ack 1 win 17520 (DF)
> I A.B.C.D.2536 > E.F.G.H.21: R:(0) win 0 (DF)
>
>
> FW External interface
>
> tcpdump: listening on eth1c0
> O I.K.L.M.31052 > E.F.G.H.21: S:(0) win 16384 <mss
> 1460,nop,nop,sackOK> (DF)
> I E.F.G.H.21 > I.K.L.M.31052: S:(0) ackwin 6144 <mss
> 1460> (DF)
> O I.K.L.M.31052 > E.F.G.H.21: . ack 1 win 17520 (DF)
> I E.F.G.H.21 > I.K.L.M.31052: P 1:5(4) ack 1 win 6144
> (DF) (FTP 220-)
> O I.K.L.M.31052 > E.F.G.H.21: R:(0) win 0 (DF)
> O I.K.L.M.31052 > E.F.G.H.21: R:(0) win 0 (DF)
>
> ***************************
>
> Please any help or advice
>
> Best regards
>
>                 Alfreds
>
> __________________________________________________
> Do You Yahoo!?
> Yahoo! Movies - coverage of the 74th Academy Awards®
> http://movies.yahoo.com/
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to LISTSERV@lists.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================




_________________________________________________________________
MSN Photos is the easiest way to share and print your photos:
http://photos.msn.com/support/worldwide.aspx

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================